security-logs

LogLens is a universal log explorer that runs entirely in your browser. Drop any log file in, query it with KQL, visualize it on a timeline, and analyze it with a local AI - all without a single byte of your data touching the internet.

Unified log processing framework for ingesting, parsing, normalizing, validating, enriching, and monitoring security and infrastructure logs with Node.js, Elasticsearch, Kibana, and AI-assisted parser generation.

A Go log-preprocessing CLI that ingests Syslog, JSON, XML, CSV, CEF, LEEF, and application logs; normalizes events to OCSF-based JSON, preserves original bytes, and supports quarantine, replay, Docker, and air-gapped deployments.

A powerful, web-based log analysis application designed for ISP and office environments. Built with modern web technologies to provide comprehensive log parsing, analysis, and visualization capabilities for Apache, Nginx, Syslog, and network device logs.

Ferramenta CLI em Python para análise de logs de segurança com isolamento por projeto, detecção de ameaças via assinaturas regex e gerenciamento de IPs maliciosos.

Universal log pre-processing framework: ECS normalisation, ML enrichment, Merkle integrity, SIEM forwarding

SOC-style investigation of Windows audited events using Event Viewer, including event correlation and incident reporting.

Herramientas en Python para convertir logs de **Windows Event Logs (.evtx)** a **JSON**, pensadas para análisis forense, threat hunting, detección y procesamiento automatizado de eventos.

Hands-on Windows Security Event Log Investigation using Event Viewer and controlled authentication testing

TryHackMe walkthrough focused on Windows initial access detection using Security logs and Sysmon.

Created a Splunk SOC Lab index, uploaded sample security logs, configured input settings, and verified successful data ingestion.

Python cybersecurity dashboard for analyzing authentication logs, detecting suspicious IP activity, and identifying possible brute-force attacks.

Parse and triage 50 security log formats locally - Entra ID, CloudTrail, Windows, Okta, firewalls, EDR and more. Nothing leaves your machine. Apache-2.0.

Paired malicious and benign sample logs for 50 security log formats - for testing parsers and detection rules. CC BY 4.0.

A comprehensive collection of security log analysis projects and methodologies for detecting threats, credential abuse, and advanced persistent threats (APTs) in enterprise environments. Features detailed forensic investigations of large-scale Windows Security Event Logs using Python-based data analytics and behavioral pattern recognition.

TryHackMe walkthrough focused on Windows event logging, Sysmon, and PowerShell-based investigation.

Windows Security Event Log investigation analyzing successful logons and privileged logon events.

Insider Threat Detection Engineering — Docusaurus practitioner field guide with detection logic, 14 documented cases, telemetry requirements, and a four-phase implementation programme

Security log anomaly detection for SSH/auth and web logs: rules + Isolation Forest, MITRE-mapped HTML reports

Windows account lockout analyzer for Security event logs, with HTML/CSV/JSON exports and optional firewall blocklist helper.